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(U)  Preliminary  Inquiry  Instituted:  10/11/2002,  set  to  expire 
02/07/2003. 


W  ^/NF/OC)  As  background,  on  09/11/2001,  American  Airlines 
representatives,  provided  to  FBI  Headquarters  the  passenger  manifest 
for  American  Airlines  Flight  #77.  The  names  Nawaf  Al-Hazmi  and  Khalid 
Al-Midhar  were  included  on  the  passenger .manifest . 

^  (^/NF/OC)  On  09/12/2001,  the  Washington  Field  Office  of 

the  FBI  was  notified  by  the  Dulles  Airport  Police  that  a  suspicious 
vehicle  was  found  at  the  Dulles  International  Airport  located  in  the 
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Hourly  Lot,  Row  G,  Herndon,  Virginia.  The  suspicious  vehicle  was 
described  as  a  1998  Toyota. 

jj^NF/OC)  Department  of  Motor  Vehicle  (DMV)  records 
determined  the  1988  Toyota,  with  California  license  plates.  Vehicle 
Identification  Number  JT2AE92E9J3137546 ,  was  registered  to  Nawaf  Al- 
Hazmi,  8451  Mt .  Vernon  Way,  Lemon  Grove,  California. 

^  yS/NF/OC)  The  vehicle  was  searched  by  agents  and  found  to 
contain  a  medical  prescription  for  Khalid  Al-Midhar,  from  | 

I  1  a  receipt  for 


car  service  at 


San  Diego,  California,  signed 
by  Khalid  Al-Midhar ,■ and  an  insurance  card  for  Khalid  Al-Midhar. 
Subsequent  investigation  determined  that  both  Al-Hazmi  and  Al-Midhar 
resided  in  San  Diego  in  1999  and  2000. 

vehicle  was  a  piece  of  paper  with 


b6 

NF/OC)  Also  found  during  the  search  of  Al-Hazmi 's 

written  on  it . 


Subsequent  search  of  telephone  databases  revealed  that  the  telephone 
1  was  subscribed  to  f" 


(U) 

interviewe 


^NF/OC)  On  09/20/2001,  FBI  agents  located  and 

hdmitted  that 

he  was  associated  with  telephone  numberf  I 

advised  that  he  was  enrolled  at  Grossmpnt  College.  Investigation  at 


Grossmont  College  revealed 


collegiate  email  address  as 


as  an  additional  email  account  on  his  student  record 


(U) 


]M/NF/OC)[ 


provided  the  FBI  with  consent  to  search 
The  search  uncovered  a  box-cutter  and 


his  residence  and  computer 
several  computer-generated  photographs  of  Usama  Bin  Laden.  A 
subsequent  search  of  the  computer  by  the  San  Diego  Regional  Computer 
Forensics  Laboratory  (RCFL)  revealed  several  occurrences  of  email 
addresses.  |  land 

™  "]lt  also  revealed  email  messages  from 


address 


t- 


The  commit, pr  .search  also  revealed  an  email 
to  email  account, 


pn  10/30/2000  with  the  subject  stating:  "I'm  very 


very  sorry. "  The  FBI  has  determined  that  Al-Hazmi  utilized  the 
ss3000@hotmail . com  account  in  late  2000  through  early  March  2001. 

!U)  h  5/NF/OC)  Investigation  by  FBI  determined  that  Abdullah 
helped  acclrmate  Al-Hazmi  and  Al-Midhar  to  the  San  Diego  area  and 
provided  assistance  with  their  travel  arrangements  and  flight  lessons 
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while  in  San  Diego.  In  early  2001,  Al-Hazmi  telephonically  contacted 
Abdullah  and  informed  him  that  Al-Hazmi  was  in  Arizona  attending 
flight  school. 

i'^'1  ^/NF/OC)  Abdullah  provided  the  FBI  consent  to  search  his 
residence,  resulting  in  the  seizure  of  his  personal  computer,  located 
on  Abdullah's  computer  was  an  email  message  dated  09/13/2001,  from 

[_  There  appeared  to  be  an  anti-American  biased 
tone  to  the  message,  as  it  queried,  "Is  it  the  same  nation  that  was 
the  only  nation  in  history  to  use  atomic  weapons  in  anger. . .Does  this 
hypocrite  nation  have  the  right  to  call  anyone  a  terrorist  just 
because  they  condemn  its  unjust  practices?" 

^  6^/NF/OC)  A  review  of  Abdullah's  computer  by  San  Diego 

RCFL  revealed  I  l  checked  his  email  from  Abdullah ' s 

computer  and  that  I  | sent  several  emails  to  Abdullah,  I 

t  and  Omar  Al-Bayoumi  in  2001.  A  home 


directory  foij 


phone 


List,"  was  located  on  Abdullah's  computer.  Within  this  directory  were 
the  following  names  and  telephone  numbers: 


'b6 

i>7C 


(U) 


received 


^NF/OC)  On  09/11/2000, 

"a  note  of ^ appreciation  and  thanks"  email  from  the"  Holy  Land 
Foundation.  \/ 

Css(NF/OC)  FBI  investigation  at  Grossmont 
College  also  revealed  that  etoail  address,  MOHDAR783HOTMAIL.COM.  was 
provided  by  Mohdar  Abdullah  as  a  point  of  contact.  Grossmont  College 
further  provided  the  Abdullah's  collegiate  email  address  is  listed  as 
MOHDARABDULLAH3  STUDENTS . GCCCD . NET . 

5/NF/OC)  On  09/21/2001,  Mohdar  Abdullah  was  arrested  on  a 
Material  Witness  warrant  for  Penttbomb  issued  out  of  the  Southern 
District  of  New  York,  after  he  declined  to  take  a  polygraph 
examination.  Abdullah's  vehicle  was  subsequently  seized.  During  the 
inventory  search,  a  spiral  notebook  was  obtained,  which  referenced 
planes  falling  from  the  sky,  mass  killings  and  hijacking. 

l^/NF/oc)  On  09/22/2001,  agents  obtained  and  executed  a 
sealed  federal  search  warrant  for  the  current  residence  of  Mohdar 
Abdullah  at  1415  East  Lexington  Avenue.  #146,  El  Caion.  California. 
Abdullah  was  renting  a  room  from  and  resided  with 
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